On Wednesday, November 2, 2016 6:30:32 PM CET Jan Ehrhardt wrote:
> Daniel Stenberg in gmane.comp.web.curl.library (Wed, 2 Nov 2016 10:30:45
>
> +0100 (CET)):
> >On Wed, 2 Nov 2016, Simon Josefsson wrote:
> >>> Based on this, I suppose my recommendation is that people simply switch
> >>> off
> >>> IDN support in curl builds until further notice to stay safe. The old
> >>> way
> >>> was open for trickery and the new way is incomplete.
> >>
> >> What trickery are you referring to?
> >
> >IDNA 2003 makes us use the wrong host for .de host names using ß:
> > https://curl.haxx.se/docs/adv_20161102K.html
>
> Any idea what libicu is doing? It seems to have both IDNA2003 and
> IDNA2008 support.

libicu has UTS #46 - it does it right.

Feel free to use the code from libpsl (https://github.com/rockdaboot/libpsl/
blob/master/src/psl.c - i am the author), which has libicu code with UTF-8
lowercasing and IDNA conversion.

Regards, Tim

-------------------------------------------------------------------
List admin: https://cool.haxx.se/list/listinfo/curl-library
Etiquette: https://curl.haxx.se/mail/etiquette.html